Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188891 9.8 緊急
Network 		Zoho Corporation - ManageEngine Desktop Central および Desktop Central MSP における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7862 2018-02-9 16:57 2014-12-31 Show GitHub Exploit DB Packet Storm
188892 8.8 重要
Network 		SAP - SAP NetWeaver におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2018-2363 2018-02-9 16:53 2018-01-9 Show GitHub Exploit DB Packet Storm
188893 8.8 重要
Network 		SAP - SAP Solution Manager における認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2018-2361 2018-02-9 16:53 2018-01-9 Show GitHub Exploit DB Packet Storm
188894 7.5 重要
Network 		SAP - SAP KERNEL における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2018-2360 2018-02-9 16:53 2018-01-9 Show GitHub Exploit DB Packet Storm
188895 5.4 警告
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0336 2018-02-9 16:49 2016-04-15 Show GitHub Exploit DB Packet Storm
188896 8.8 重要
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-0335 2018-02-9 16:49 2016-04-15 Show GitHub Exploit DB Packet Storm
188897 9.8 緊急
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2016-0332 2018-02-9 16:49 2016-04-15 Show GitHub Exploit DB Packet Storm
188898 7.8 重要
Local 		IBM - IBM Security Identity Manager 仮想アプライアンスにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0327 2018-02-9 16:49 2016-04-15 Show GitHub Exploit DB Packet Storm
188899 8.8 重要
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-0324 2018-02-9 16:49 2016-04-15 Show GitHub Exploit DB Packet Storm
188900 7.8 重要
Local 		Google - Android における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-15849 2018-02-9 16:43 2017-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1501 6.5 MEDIUM
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.185.0, a cross-tenant authorization flaw in Daytona's notification WebSocket gat… CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-54324 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1502 7.0 HIGH
Network 		- - Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. From 0.101.0 until 0.184.0, sandbox previews that were switched from public to private coul… CWE-613
CWE-863
 Insufficient Session Expiration
 Incorrect Authorization 		CVE-2026-54321 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1503 4.2 MEDIUM
Network 		- - Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function cannot reliably remove all HTML tags from input strings. Certain malformed HTML, … CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-52846 2026-06-25 22:16 2026-06-24 Show GitHub Exploit DB Packet Storm
1504 - - - In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS A logic flaw in __smc_setsockopt() allows a local unprivil… - CVE-2026-53274 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1505 - - - In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress z_erofs_decompress_kickoff() can race with filesystem unmount, causing a use-af… - CVE-2026-53272 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1506 - - - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers smb2_oplock_break_noti() and smb2_lease_break_noti() read o… - CVE-2026-53271 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1507 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook reference counting As the synproxy infrastructure register netfilter hooks on-demand… - CVE-2026-53269 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1508 - - - In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in lowpan_iphc_mcast_ctx_addr_compress() uses … - CVE-2026-53263 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1509 - - - In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free devlink relation state is normally released from devl_unregister(), which calls … - CVE-2026-53261 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm
1510 - - - In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev->int_scan_req is leaked if cfg80211_scan() fails. Note that it's supposed to b… - CVE-2026-53258 2026-06-25 18:16 2026-06-25 Show GitHub Exploit DB Packet Storm